> How does it work - can people actually report violations to this enforcement agency? How hard/likely is it for a company to simply buy their way into these agencies?

I can't speak for all of Europe, but in Northern Europe this would be very unlikely to happen. The governments and agencies aren't flawless here either, but at least they are quite honest and uncorrupted.